Example Usage

sudo docker build -t splunk4dfir .
sudo docker run --name splunk4dfir -e SPLUNK_START_ARGS=--accept-license -e SPLUNK_GENERAL_TERMS=--accept-sgt-current-at-splunk-com -e SPLUNK_PASSWORD=changeme -e SPLUNK_APPS_URL="/mnt/resources/sankey-diagram-custom-visualization_130.tgz" -p 8000:8000 -p 8089:8089 -v ./artifacts:/mnt/artifacts -v ./resources:/mnt/resources splunk4dfir:latest start

See also

Bulk Extractor

Open Source Kali

Scans a disk image, file, or directory and extracts features such as email addresses, URLs, credit c…

Binwalk

Open Source Kali

Firmware analysis tool for searching, extracting, and analyzing binary images. Identifies embedded f…

NetworkMiner

Freemium

Network forensics analysis tool (NFAT) that captures packets and parses them to reconstruct transmit…

htmldate

Open Source

Fast and robust date extraction from web pages, with Python or on the command-line…

VerifyVision-Pro

Open Source

VerifyVision-Pro是一个全面的图像伪造篡改检测解决方案，利用深度学习（deep learning）和计算机视觉技术（cv）精确识别各类图像篡改，包括deepfake、AI生成内容、拼接操…

DFIR-Detection-Engineering

Open Source

Digital Forensics Incident Response and Detection engineering: Análisis forense de artefactos comune…